Firewall

Question 1

What are the challenges of service insertion in the cloud (3)

Answer 1

Firewall Vendors - on prem solutions, expect customers to route
Cloud Provider - customer figure out routing, lack visibilitioy / tools
Customer - manually figure out route tables, lack visibility/tools

Question 2

4 facets of Aviatrix Firewall archtiecture integrated at L4/L7

Answer 2

transit integrates L4 FW (centralize)
better performance and control for NetSec
L4 and NGFW functions service chained to specialized 3rd party apps
repeatable across regions and clouds

Question 3

Firewall service insertion does not need _____ or _____ or _______

Answer 3

No IPsec, No BGP, No SNAT required

Question 4

FireNet will ECMP traffic to spoke gateway using ________ to on of the Aviatrix transit gateways

Answer 4

5-tuple hash